r23090: a test showing two netlogon pipes open at once, using the LogonEx ops

(This used to be commit 576dbdc8eece5c2fef743835c7cc255f02050ad3)

2 files changed, 96 insertions, 0 deletions

diff --git a/source4/torture/rpc/rpc.c b/source4/torture/rpc/rpc.c
index c3060d08d7..859b734899 100644
--- a/source4/torture/rpc/rpc.c
+++ b/source4/torture/rpc/rpc.c
@@ -183,6 +183,7 @@ NTSTATUS torture_rpc_init(void)
 	torture_suite_add_simple_test(suite, "SAMLOGON", torture_rpc_samlogon);
 	torture_suite_add_simple_test(suite, "SAMSYNC", torture_rpc_samsync);
 	torture_suite_add_simple_test(suite, "SCHANNEL", torture_rpc_schannel);
+	torture_suite_add_simple_test(suite, "SCHANNEL2", torture_rpc_schannel2);
 	torture_suite_add_simple_test(suite, "SRVSVC", torture_rpc_srvsvc);
 	torture_suite_add_simple_test(suite, "SVCCTL", torture_rpc_svcctl);
 	torture_suite_add_simple_test(suite, "EPMAPPER", torture_rpc_epmapper);
diff --git a/source4/torture/rpc/schannel.c b/source4/torture/rpc/schannel.c
index a80b94ab3b..0a1f8dd73b 100644
--- a/source4/torture/rpc/schannel.c
+++ b/source4/torture/rpc/schannel.c
@@ -30,6 +30,7 @@
 #include "auth/gensec/schannel_proto.h"
 #include "libcli/auth/libcli_auth.h"
 #include "libcli/security/security.h"
+#include "system/filesys.h"
 
 #define TEST_MACHINE_NAME "schannel"
 
@@ -446,6 +447,8 @@ failed:
 	return False;	
 }
 
+
+
 /*
   a schannel test suite
  */
@@ -485,3 +488,95 @@ BOOL torture_rpc_schannel(struct torture_context *torture)
 
 	return ret;
 }
+
+/*
+  test two schannel connections
+ */
+BOOL torture_rpc_schannel2(struct torture_context *torture)
+{
+	BOOL ret = True;
+	TALLOC_CTX *mem_ctx = talloc_new(torture);
+	struct test_join *join_ctx;
+	NTSTATUS status;
+	const char *binding = lp_parm_string(-1, "torture", "binding");
+	struct dcerpc_binding *b;
+	struct dcerpc_pipe *p1 = NULL, *p2 = NULL;
+	struct cli_credentials *credentials1, *credentials2;
+	uint16_t acct_flags = ACB_WSTRUST;
+	uint32_t dcerpc_flags = DCERPC_SCHANNEL | DCERPC_SIGN;
+	TALLOC_CTX *test_ctx = talloc_named(mem_ctx, 0, "test_schannel2 context");
+
+	join_ctx = torture_join_domain(talloc_asprintf(mem_ctx, "%s2", TEST_MACHINE_NAME), 
+				       acct_flags, &credentials1);
+	if (!join_ctx) {
+		printf("Failed to join domain with acct_flags=0x%x\n", acct_flags);
+		talloc_free(test_ctx);
+		return False;
+	}
+
+	credentials2 = talloc_memdup(mem_ctx, credentials1, sizeof(*credentials1));
+	credentials1->netlogon_creds = NULL;
+	credentials2->netlogon_creds = NULL;
+
+	status = dcerpc_parse_binding(test_ctx, binding, &b);
+	if (!NT_STATUS_IS_OK(status)) {
+		printf("Bad binding string %s\n", binding);
+		goto failed;
+	}
+
+	b->flags &= ~DCERPC_AUTH_OPTIONS;
+	b->flags |= dcerpc_flags;
+
+	printf("Opening first connection\n");
+	status = dcerpc_pipe_connect_b(test_ctx, &p1, b, &dcerpc_table_netlogon,
+				       credentials1, NULL);
+	if (!NT_STATUS_IS_OK(status)) {
+		printf("Failed to connect with schannel: %s\n", nt_errstr(status));
+		goto failed;
+	}
+
+	printf("Opening second connection\n");
+	status = dcerpc_pipe_connect_b(test_ctx, &p2, b, &dcerpc_table_netlogon,
+				       credentials2, NULL);
+	if (!NT_STATUS_IS_OK(status)) {
+		printf("Failed to connect with schannel: %s\n", nt_errstr(status));
+		goto failed;
+	}
+
+	credentials1->netlogon_creds = NULL;
+	credentials2->netlogon_creds = NULL;
+
+	printf("Testing logon on pipe1\n");
+	if (!test_netlogon_ex_ops(p1, test_ctx, credentials1, NULL)) {
+		printf("Failed to process schannel secured NETLOGON ops\n");
+		ret = False;
+	}
+
+	printf("Testing logon on pipe2\n");
+	if (!test_netlogon_ex_ops(p2, test_ctx, credentials2, NULL)) {
+		printf("Failed to process schannel secured NETLOGON ops\n");
+		ret = False;
+	}
+
+	printf("Again on pipe1\n");
+	if (!test_netlogon_ex_ops(p1, test_ctx, credentials1, NULL)) {
+		printf("Failed to process schannel secured NETLOGON ops\n");
+		ret = False;
+	}
+
+	printf("Again on pipe2\n");
+	if (!test_netlogon_ex_ops(p2, test_ctx, credentials2, NULL)) {
+		printf("Failed to process schannel secured NETLOGON ops\n");
+		ret = False;
+	}
+
+	torture_leave_domain(join_ctx);
+	talloc_free(test_ctx);
+	return ret;
+
+failed:
+	torture_leave_domain(join_ctx);
+	talloc_free(test_ctx);
+	return False;	
+}
+